What’s Vulnerable › Vulnerabilities

CVE-2013-6447

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-23 · updated 2026-06-17
• Weakness: CWE-200

Description

Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allow remote attackers to read arbitrary files and possibly have other impacts via a crafted XML file.

Affected products

• RedHat Jboss Seam 2 Framework: through 2.3.1; 2.0.0-beta1, 2.0.0-cr1, 2.0.0-cr2, 2.0.0-cr3, 2.0.0-ga, 2.0.1-cr1 (+31)

References

• http://rhn.redhat.com/errata/RHSA-2014-0045.html
• http://secunia.com/advisories/56572
• http://www.securitytracker.com/id/1029652
• https://bugzilla.redhat.com/show_bug.cgi?id=1044784
• https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5
• http://rhn.redhat.com/errata/RHSA-2014-0045.html
• http://secunia.com/advisories/56572
• http://www.securitytracker.com/id/1029652
• https://bugzilla.redhat.com/show_bug.cgi?id=1044784
• https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5

Get alerted when CVE-2013-6447 or the next vulnerability affects your stack